$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7ce61141-236e-4f9e-b965-53beb0966112.roa File: 7ce61141-236e-4f9e-b965-53beb0966112.roa (raw, json) Hash identifier: TeWWOhRnqlyKVzyDHB3ClmQXT6KoaRqz0VbPA99jnck= Subject key identifier: F7:E3:1D:FF:E5:5A:1A:97:83:1E:18:E2:2E:9A:45:D2:0A:3C:0F:D5 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1C60014617296A1B1CEF0B04B47475FE588F8EA4 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7ce61141-236e-4f9e-b965-53beb0966112.roa Signing time: Fri 11 Jul 2025 18:00:17 +0000 ROA not before: Fri 11 Jul 2025 18:00:17 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 173.82.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:60:01:46:17:29:6a:1b:1c:ef:0b:04:b4:74:75:fe:58:8f:8e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 11 18:00:17 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=cececeddfc8af27f829144b40f3c2c629a92f3917c496f87d77ebd84d2250ced, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bc:13:b8:50:cf:da:11:a9:eb:aa:bd:05:64: 06:75:c6:86:ff:9b:51:83:22:ac:48:73:bf:57:c5: de:66:e9:5f:70:e8:24:32:68:c5:40:d3:fe:18:60: 13:46:55:33:66:4e:f7:57:50:1a:67:f7:be:69:6a: ee:c1:3d:97:2d:65:6e:3c:2b:5e:68:f6:92:d7:f2: 6d:6b:13:51:d2:02:b2:ef:a6:4b:e4:cd:75:16:d8: a3:ce:01:f5:a4:2f:f2:a7:35:a0:f8:5c:e4:c4:cb: 6c:55:3f:0c:61:62:5a:bc:6f:8c:98:50:0d:44:de: 6c:18:f2:7e:07:87:7e:a6:23:19:c7:e5:73:5c:60: 22:7b:9a:86:db:04:33:de:dd:4e:50:1e:77:53:87: 14:54:9c:c4:cc:55:47:37:13:1d:42:2e:49:53:9c: 6c:40:36:10:98:0f:59:1d:0b:a4:7d:c7:70:8c:7c: ad:d6:cd:ba:1d:eb:54:45:21:79:59:34:f8:df:61: 84:be:32:bf:6e:7d:23:d3:9b:05:08:7a:50:ac:da: 02:42:a5:ca:89:bc:2b:2f:6c:07:75:35:9f:ee:a3: cc:31:21:39:20:74:e5:5b:ba:fe:f6:a4:2f:9d:64: 19:be:be:98:aa:4b:9c:88:b0:c8:b8:9c:3e:7f:ff: 7d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E3:1D:FF:E5:5A:1A:97:83:1E:18:E2:2E:9A:45:D2:0A:3C:0F:D5 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7ce61141-236e-4f9e-b965-53beb0966112.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.94.0/24 Signature Algorithm: sha256WithRSAEncryption 06:b9:e3:fe:d1:83:66:af:7a:79:ff:37:d3:2b:fb:08:08:fa: 54:5e:28:14:93:12:0c:7e:bf:51:77:dc:3d:c6:e9:40:3e:62: 4b:aa:b1:b5:ec:85:39:1a:e7:e1:58:ea:5f:45:9a:c4:73:28: d6:43:a0:8a:0a:92:a8:1c:63:f2:ae:0f:0b:10:70:39:b8:8c: da:44:03:19:a6:6b:53:d2:49:05:8e:77:bd:87:e6:81:24:a2: 3b:92:46:9b:d3:fd:73:1b:55:b0:c2:9f:26:50:22:07:e4:10: 0a:b9:14:09:4e:d3:57:93:64:83:9f:b2:5e:69:8a:dd:b7:de: 2a:57:0a:05:38:68:cd:e0:6c:d1:fb:67:9b:db:8c:71:cc:5b: 09:70:8e:f5:24:a5:f0:65:bd:0e:f4:a7:34:27:65:df:a4:a4: 23:ef:96:a5:38:ae:c1:cb:cc:48:61:b6:80:96:c1:c1:34:27: d7:a2:08:6d:23:b9:94:99:4a:1a:36:3b:92:03:90:8b:b9:68: 9c:25:85:11:95:48:ef:f5:94:5a:42:02:4b:cd:e4:eb:55:a0: 0e:96:d2:63:3b:7c:02:f4:bb:31:7d:4f:5e:ad:dd:5f:40:93: 18:24:48:be:03:bd:d5:fa:91:71:69:0d:de:3b:48:77:62:a9: 4b:58:08:d2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHGABRhcpahsc7wsEtHR1/liPjqQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzExMTgwMDE3WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZWNlY2VkZGZjOGFmMjdmODI5MTQ0YjQwZjNjMmM2Mjlh OTJmMzkxN2M0OTZmODdkNzdlYmQ4NGQyMjUwY2VkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGvBO4UM/aEanrqr0FZAZ1xob/m1GDIqxIc79Xxd5m6V9w 6CQyaMVA0/4YYBNGVTNmTvdXUBpn975pau7BPZctZW48K15o9pLX8m1rE1HSArLv pkvkzXUW2KPOAfWkL/KnNaD4XOTEy2xVPwxhYlq8b4yYUA1E3mwY8n4Hh36mIxnH 5XNcYCJ7mobbBDPe3U5QHndThxRUnMTMVUc3Ex1CLklTnGxANhCYD1kdC6R9x3CM fK3Wzbod61RFIXlZNPjfYYS+Mr9ufSPTmwUIelCs2gJCpcqJvCsvbAd1NZ/uo8wx ITkgdOVbuv72pC+dZBm+vpiqS5yIsMi4nD5//30vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9+Md/+VaGpeDHhjiLppF0go8D9UwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzdjZTYxMTQxLTIzNmUtNGY5ZS1iOTY1LTUzYmViMDk2NjExMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUl4wDQYJKoZIhvcNAQELBQADggEBAAa54/7Rg2avenn/N9Mr+wgI+lRe KBSTEgx+v1F33D3G6UA+YkuqsbXshTka5+FY6l9FmsRzKNZDoIoKkqgcY/KuDwsQ cDm4jNpEAxmma1PSSQWOd72H5oEkojuSRpvT/XMbVbDCnyZQIgfkEAq5FAlO01eT ZIOfsl5pit233ipXCgU4aM3gbNH7Z5vbjHHMWwlwjvUkpfBlvQ70pzQnZd+kpCPv lqU4rsHLzEhhtoCWwcE0J9eiCG0juZSZSho2O5IDkIu5aJwlhRGVSO/1lFpCAkvN 5OtVoA6W0mM7fAL0uzF9T16t3V9AkxgkSL4DvdX6kXFpDd47SHdiqUtYCNI= -----END CERTIFICATE-----Generated at Tue Aug 5 17:12:27 2025 by rpki-client